140 lines
6.5 KiB
Text
140 lines
6.5 KiB
Text
|
|
/home/alex/sots-re/dumps/sots.exe: file format pei-i386
|
|
|
|
|
|
Disassembly of section .text:
|
|
|
|
00879eb0 <.text+0x478eb0>:
|
|
879eb0: 55 push ebp
|
|
879eb1: 8b ec mov ebp,esp
|
|
879eb3: 51 push ecx
|
|
879eb4: 53 push ebx
|
|
879eb5: 8b 5d 08 mov ebx,DWORD PTR [ebp+0x8]
|
|
879eb8: 8b d1 mov edx,ecx
|
|
879eba: 8b 4a 08 mov ecx,DWORD PTR [edx+0x8]
|
|
879ebd: 56 push esi
|
|
879ebe: 8b 72 04 mov esi,DWORD PTR [edx+0x4]
|
|
879ec1: 8b c6 mov eax,esi
|
|
879ec3: 83 c3 ce add ebx,0xffffffce
|
|
879ec6: 57 push edi
|
|
879ec7: 89 55 fc mov DWORD PTR [ebp-0x4],edx
|
|
879eca: 8b f9 mov edi,ecx
|
|
879ecc: 3b c1 cmp eax,ecx
|
|
879ece: 74 0e je 0x879ede
|
|
879ed0: 39 58 04 cmp DWORD PTR [eax+0x4],ebx
|
|
879ed3: 7d 09 jge 0x879ede
|
|
879ed5: 8b f8 mov edi,eax
|
|
879ed7: 83 c0 18 add eax,0x18
|
|
879eda: 3b c1 cmp eax,ecx
|
|
879edc: 75 f2 jne 0x879ed0
|
|
879ede: 3b f9 cmp edi,ecx
|
|
879ee0: 74 56 je 0x879f38
|
|
879ee2: 3b f7 cmp esi,edi
|
|
879ee4: 74 52 je 0x879f38
|
|
879ee6: 8b d9 mov ebx,ecx
|
|
879ee8: 3b fb cmp edi,ebx
|
|
879eea: 74 2c je 0x879f18
|
|
879eec: 8b c7 mov eax,edi
|
|
879eee: 2b c6 sub eax,esi
|
|
879ef0: 89 45 08 mov DWORD PTR [ebp+0x8],eax
|
|
879ef3: eb 03 jmp 0x879ef8
|
|
879ef5: 8b 45 08 mov eax,DWORD PTR [ebp+0x8]
|
|
879ef8: 8b 44 30 04 mov eax,DWORD PTR [eax+esi*1+0x4]
|
|
879efc: 8d 4f 08 lea ecx,[edi+0x8]
|
|
879eff: 51 push ecx
|
|
879f00: 8d 4e 08 lea ecx,[esi+0x8]
|
|
879f03: 89 46 04 mov DWORD PTR [esi+0x4],eax
|
|
879f06: e8 a5 07 f0 ff call 0x77a6b0
|
|
879f0b: 83 c7 18 add edi,0x18
|
|
879f0e: 83 c6 18 add esi,0x18
|
|
879f11: 3b fb cmp edi,ebx
|
|
879f13: 75 e0 jne 0x879ef5
|
|
879f15: 8b 55 fc mov edx,DWORD PTR [ebp-0x4]
|
|
879f18: 8b 5a 08 mov ebx,DWORD PTR [edx+0x8]
|
|
879f1b: 8b fe mov edi,esi
|
|
879f1d: 3b f3 cmp esi,ebx
|
|
879f1f: 74 14 je 0x879f35
|
|
879f21: 8b 17 mov edx,DWORD PTR [edi]
|
|
879f23: 8b 02 mov eax,DWORD PTR [edx]
|
|
879f25: 6a 00 push 0x0
|
|
879f27: 8b cf mov ecx,edi
|
|
879f29: ff d0 call eax
|
|
879f2b: 83 c7 18 add edi,0x18
|
|
879f2e: 3b fb cmp edi,ebx
|
|
879f30: 75 ef jne 0x879f21
|
|
879f32: 8b 55 fc mov edx,DWORD PTR [ebp-0x4]
|
|
879f35: 89 72 08 mov DWORD PTR [edx+0x8],esi
|
|
879f38: 5f pop edi
|
|
879f39: 5e pop esi
|
|
879f3a: 5b pop ebx
|
|
879f3b: 8b e5 mov esp,ebp
|
|
879f3d: 5d pop ebp
|
|
879f3e: c2 04 00 ret 0x4
|
|
879f41: cc int3
|
|
879f42: cc int3
|
|
879f43: cc int3
|
|
879f44: cc int3
|
|
879f45: cc int3
|
|
879f46: cc int3
|
|
879f47: cc int3
|
|
879f48: cc int3
|
|
879f49: cc int3
|
|
879f4a: cc int3
|
|
879f4b: cc int3
|
|
879f4c: cc int3
|
|
879f4d: cc int3
|
|
879f4e: cc int3
|
|
879f4f: cc int3
|
|
879f50: 55 push ebp
|
|
879f51: 8b ec mov ebp,esp
|
|
879f53: 56 push esi
|
|
879f54: 8b f1 mov esi,ecx
|
|
879f56: e8 a5 ae ff ff call 0x874e00
|
|
879f5b: f6 45 08 01 test BYTE PTR [ebp+0x8],0x1
|
|
879f5f: 74 09 je 0x879f6a
|
|
879f61: 56 push esi
|
|
879f62: e8 43 b0 0a 00 call 0x924faa
|
|
879f67: 83 c4 04 add esp,0x4
|
|
879f6a: 8b c6 mov eax,esi
|
|
879f6c: 5e pop esi
|
|
879f6d: 5d pop ebp
|
|
879f6e: c2 04 00 ret 0x4
|
|
879f71: cc int3
|
|
879f72: cc int3
|
|
879f73: cc int3
|
|
879f74: cc int3
|
|
879f75: cc int3
|
|
879f76: cc int3
|
|
879f77: cc int3
|
|
879f78: cc int3
|
|
879f79: cc int3
|
|
879f7a: cc int3
|
|
879f7b: cc int3
|
|
879f7c: cc int3
|
|
879f7d: cc int3
|
|
879f7e: cc int3
|
|
879f7f: cc int3
|
|
879f80: 55 push ebp
|
|
879f81: 8b ec mov ebp,esp
|
|
879f83: 8b 55 18 mov edx,DWORD PTR [ebp+0x18]
|
|
879f86: 8a 45 08 mov al,BYTE PTR [ebp+0x8]
|
|
879f89: 53 push ebx
|
|
879f8a: 56 push esi
|
|
879f8b: 8b f1 mov esi,ecx
|
|
879f8d: 8b 4d 14 mov ecx,DWORD PTR [ebp+0x14]
|
|
879f90: 89 4e 08 mov DWORD PTR [esi+0x8],ecx
|
|
879f93: 52 push edx
|
|
879f94: 8d 4e 20 lea ecx,[esi+0x20]
|
|
879f97: 88 46 04 mov BYTE PTR [esi+0x4],al
|
|
879f9a: e8 51 50 f4 ff call 0x7beff0
|
|
879f9f: 8b 45 1c mov eax,DWORD PTR [ebp+0x1c]
|
|
879fa2: 8a 4d 20 mov cl,BYTE PTR [ebp+0x20]
|
|
879fa5: 8a 55 0c mov dl,BYTE PTR [ebp+0xc]
|
|
879fa8: 89 46 14 mov DWORD PTR [esi+0x14],eax
|
|
879fab: 8a 45 10 mov al,BYTE PTR [ebp+0x10]
|
|
879fae: 88 4e 18 mov BYTE PTR [esi+0x18],cl
|
|
879fb1: 8b 4d 24 mov ecx,DWORD PTR [ebp+0x24]
|
|
879fb4: 88 56 10 mov BYTE PTR [esi+0x10],dl
|
|
879fb7: 8b 55 28 mov edx,DWORD PTR [ebp+0x28]
|
|
879fba: 88 46 11 mov BYTE PTR [esi+0x11],al
|
|
879fbd: 8b 45 2c mov eax,DWORD PTR [ebp+0x2c]
|